Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/CD06E122EC0F11E99A8F8323F8AEA228.roa
File:                     CD06E122EC0F11E99A8F8323F8AEA228.roa (raw, json)
Hash identifier:          P3DTRNREaUAunMCiulFepSItgXp6VhluDnMy9aUBtJI=
Subject key identifier:   BA:EC:4D:D5:DC:5B:F4:A1:23:22:DA:61:A2:F9:23:74:20:89:95:F6
Certificate issuer:       /CN=F361D299AF/serialNumber=2B2442848174AA8894469A779B9FD7DA4958C669
Certificate serial:       05EF
Authority key identifier: 2B:24:42:84:81:74:AA:88:94:46:9A:77:9B:9F:D7:DA:49:58:C6:69
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KyRChIF0qoiURpp3m5_X2klYxmk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/CD06E122EC0F11E99A8F8323F8AEA228.roa
Signing time:             Fri 11 Oct 2019 10:13:42 +0000
ROA not before:           Fri 11 Oct 2019 10:13:36 +0000
ROA not after:            Thu 11 Oct 2029 10:13:36 +0000
asID:                     37199
IP address blocks:        197.155.28.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1519 (0x5ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361D299AF/serialNumber=2B2442848174AA8894469A779B9FD7DA4958C669
        Validity
            Not Before: Oct 11 10:13:36 2019 GMT
            Not After : Oct 11 10:13:36 2029 GMT
        Subject: CN=5da055d6-1258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c5:84:16:3f:79:12:73:54:b1:77:6c:25:ca:
                    bc:c8:c3:a2:57:ec:23:d2:76:da:4c:10:61:52:cd:
                    8d:2a:ab:25:e2:3e:aa:20:55:19:51:fa:2e:83:df:
                    f8:0a:75:3f:f8:cb:d9:1f:5c:b2:fc:23:b2:fb:fb:
                    46:50:1a:11:5f:93:22:f3:ea:88:5a:1b:55:e6:c7:
                    34:4d:b9:d0:92:44:39:9f:82:b4:fe:35:1a:16:de:
                    d0:18:87:3d:be:56:f7:e7:34:b6:8f:e0:2f:61:53:
                    df:14:16:54:4f:17:e7:b9:7b:33:8c:51:51:35:88:
                    2d:22:7c:9f:56:fa:6b:ba:fc:32:24:6f:ee:ea:f8:
                    6d:44:d2:cc:f5:39:3d:83:6f:1b:80:de:22:a1:b8:
                    a7:f8:51:7b:ec:17:00:aa:5e:81:a2:2c:60:a9:09:
                    8e:ef:92:10:c9:31:28:21:9e:d4:43:6b:d5:55:a5:
                    5e:c2:5d:f8:6a:6d:f9:29:95:68:83:ed:ff:d9:07:
                    b3:d5:09:73:28:7d:28:52:fe:7a:7d:23:4e:86:c3:
                    f5:96:81:19:36:36:68:07:4a:0b:de:c7:44:4d:bf:
                    07:77:2b:1c:1d:88:b1:65:38:f1:ee:2d:ca:5e:00:
                    71:20:13:05:56:1d:40:dc:fd:9b:91:a5:1c:9a:11:
                    56:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:EC:4D:D5:DC:5B:F4:A1:23:22:DA:61:A2:F9:23:74:20:89:95:F6
            X509v3 Authority Key Identifier:
                keyid:2B:24:42:84:81:74:AA:88:94:46:9A:77:9B:9F:D7:DA:49:58:C6:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KyRChIF0qoiURpp3m5_X2klYxmk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/CD06E122EC0F11E99A8F8323F8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  197.155.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:49:a4:b5:b2:9b:4c:a0:b7:40:e8:0e:8c:b8:14:c6:8d:54:
         34:db:3e:32:cd:9b:ea:79:e5:5d:ab:6e:75:57:6e:92:19:ab:
         86:c0:26:b1:54:68:64:19:d9:7a:2b:e3:55:b4:9e:30:1a:34:
         8f:49:3a:e0:2d:8f:3f:cc:c9:63:17:6e:97:8a:1d:8f:d2:23:
         9a:3e:ca:43:30:fe:f3:2c:1a:7a:f7:96:75:32:47:ba:b0:af:
         f9:ca:e6:be:90:10:41:aa:9e:fb:95:43:73:e7:d7:61:d7:d8:
         52:4d:63:a5:9d:a6:0a:dc:d0:80:6f:b4:9e:e7:fa:2d:7c:a5:
         63:a7:2b:0d:98:e9:45:79:19:19:c4:7a:4e:b0:79:a0:29:c9:
         ee:9f:fe:d7:bb:8d:23:5e:97:b1:10:9d:e2:75:23:7a:cf:ef:
         0e:f5:8b:b3:b5:f1:dc:15:c0:57:e6:e6:b8:2b:4e:9d:3f:0f:
         5f:f0:19:ce:cb:fd:50:1e:9b:69:f1:37:c7:88:13:b4:79:46:
         37:b7:a1:e7:8b:a8:22:01:84:00:f3:2a:a5:0b:8a:8d:1c:d9:
         2c:81:9b:39:fd:fa:55:49:1e:47:b2:29:8a:0a:8a:26:e6:00:
         cb:f6:a2:22:4d:ac:29:55:50:d3:f8:44:1c:27:0b:7d:e7:05:
         72:fa:ec:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----